The server room of a university is often open when students and other non$-$staff members have access. In the past has led to damage from intruders estimated at about $$30,000$ per attack $($mainly due to loss of reputation$).$ The installation of an ID card swipe for access control is being considered. While intruders have entered at an average rate of one per year for the last $6$ years, the access control is expected to reduce this to one in $5$ years on average. If the cost of the ID card system is approximately $$4,000$ per year, what is the CBA and ROSI?